self-hosted/Mailu
1
0
Fork 0
mirror of https://github.com/Mailu/Mailu.git synced 2025-03-03 14:52:36 +02:00
Code Issues Releases Activity

Fix permission management when editing/deleting fetches

Browse Source
This commit is contained in:
Pierre Jaury 2016-06-25 19:48:10 +02:00
parent 58ec3597ab
commit 21bec865b3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
admin/freeposte/admin/utils.py
View File

@ -46,6 +46,6 @@ def get_fetch(fetch_id):
if not fetch:
flask.abort(404)
if not fetch.user.domain in flask_login.current_user.get_managed_domains():
if not fetch.user == flask_login.current_user:
if not fetch.user.email == flask_login.current_user.email:
flask.abort(403)
return fetch